CVE-2021-29112

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user.

Score

CVSS 3.1 5.5 Medium

Status

Modified - psirt@esri.com

Published

2022-08-12

Last modified

2025-04-10

Weaknesses

CWE-125

Affected products

• Arcreader (Esri)

References

• https://www.esri.com/arcgis-blog/products/arcgis-desktop/administration/arcreader-general-data-frame-security-update/